An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server.
This issue affects MagicINFO 9 Server: less than 21.1090.1.
A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover
This issue affects MagicINFO 9 Server: less than 21.1090.1.
CVE-2026-20976 is a medium severity vulnerability in Samsung Mobile's Galaxy Store prior to version 4.6.02, caused by improper input validation (CWE-20). It allows a local attacker to execute arbitrary scripts without requiring user interaction or privileges. The vulnerability has a CVSS 4.0 base score of 5.1, indicating moderate risk. No known exploits are currently reported in the wild. The flaw affects the Galaxy Store app on Samsung mobile devices, potentially enabling script execution that could lead to local data manipulation or further attacks. European organizations using Samsung devices with the vulnerable Galaxy Store version may face risks, especially those with sensitive mobile endpoints.
CVE-2026-20975 is a low-severity vulnerability in Samsung Cloud prior to version 5.6.11, caused by improper handling of insufficient permissions. This flaw allows local attackers to access specific files via arbitrary paths without requiring authentication or user interaction. The vulnerability stems from CWE-280, indicating improper privilege checks. Exploitation requires local access but can lead to unauthorized file disclosure. No known exploits are currently reported in the wild. The impact on confidentiality is limited, with no effect on integrity or availability. European organizations using Samsung Cloud on mobile devices could be affected, especially where Samsung devices have significant market share. Mitigation involves updating Samsung Cloud to version 5.
CVE-2026-20974 is a medium-severity vulnerability affecting Samsung Mobile devices due to improper input validation related to network restrictions. This flaw allows a physical attacker to bypass the Carrier Relock feature, which is intended to restrict device use to specific carriers. The vulnerability requires physical access but no authentication or user interaction, and it does not impact confidentiality or availability directly but compromises device integrity. There are no known exploits in the wild, and no patches have been linked yet. European organizations using Samsung Mobile devices could face risks of unauthorized carrier unlocking, potentially leading to unauthorized network access or device misuse. Mitigation involves monitoring for firmware updates from Samsung and restricting physical access to devices. Countries with high Samsung device penetration and significant mobile carrier infrastructure, such as Germany, France, the UK, Italy, and Spain, are most likely to be affected. Given the medium CVSS score of 5.2, the threat is moderate but should be addressed proactively to prevent exploitation.
CVE-2026-20973 is a medium-severity out-of-bounds read vulnerability in Samsung Mobile Devices affecting the libimagecodec.quram.so component prior to the SMR January 2026 Release 1. This flaw allows a remote attacker to read memory outside the intended bounds without requiring authentication or user interaction. The vulnerability impacts confidentiality but does not affect integrity or availability. Exploitation requires network access but is considered low complexity. No known exploits are currently in the wild, and no patches have been linked yet. European organizations using Samsung mobile devices could face data leakage risks if targeted. Mitigation involves timely application of Samsung’s security updates once available and restricting network exposure of vulnerable devices. Countries with high Samsung mobile market penetration and critical infrastructure reliance on mobile communications are most at risk.
CVE-2026-20972 is a medium severity vulnerability affecting Samsung Mobile devices, caused by improper export of Android application components in the UwbTest app prior to the SMR Jan-2026 Release 1. This flaw allows local attackers with limited privileges to enable Ultra-Wideband (UWB) functionality without user interaction or elevated authentication. The vulnerability arises from CWE-926, which involves improper export of application components, potentially exposing sensitive device capabilities. Although no known exploits are currently reported in the wild, the vulnerability could be leveraged to manipulate UWB features, possibly impacting device confidentiality or integrity. The CVSS score of 4.8 reflects a moderate risk due to the local attack vector and required privileges. European organizations using Samsung Mobile devices with affected firmware versions should be aware of this issue and apply vendor updates once available. Mitigation involves restricting local access, monitoring device behavior, and applying security patches promptly. Countries with high Samsung Mobile market penetration and strategic use of UWB technology, such as Germany, France, and the UK, are most likely to be impacted.
CVE-2026-20971 is a use-after-free vulnerability in the PROCA driver of Samsung Mobile Devices prior to the SMR January 2026 Release 1. This vulnerability allows local attackers with low privileges to potentially execute arbitrary code on affected devices. The issue is classified under CWE-416 and has a CVSS 4.0 base score of 7.3, indicating high severity. No specific affected versions are provided, and no patch or remediation details are currently available from the vendor. There are no known exploits in the wild at this time.
CVE-2026-20969 is a low-severity vulnerability in Samsung Mobile Devices caused by improper input validation in the SecSettings component prior to the SMR Jan-2026 Release 1. This flaw allows a local attacker with limited privileges to access files with system-level privileges. Exploitation requires user interaction but does not require network access, making remote exploitation infeasible. The vulnerability impacts confidentiality by potentially exposing sensitive system files but does not affect integrity or availability. No known exploits are currently in the wild. European organizations using Samsung Mobile Devices could be affected, especially in countries with high Samsung market penetration. Mitigation involves applying the January 2026 security release from Samsung once available and restricting local access to trusted users. Given the low CVSS score (2.3) and the requirement for local access and user interaction, the overall risk is low but should not be ignored in sensitive environments.
CVE-2025-58488 is a medium severity vulnerability in Samsung Mobile's SmartTouchCall application prior to version 1.0.1.1. It involves improper verification of the source of a communication channel, which can allow remote attackers to access sensitive information. Exploitation requires user interaction and high privileges. There is no confirmed patch or official fix information available at this time.
CVE-2025-58487 is an improper authorization vulnerability in Samsung Account versions prior to 15.5.01.1. It allows a local attacker to launch arbitrary activities with Samsung Account privileges. The vulnerability does not impact confidentiality or integrity but may affect availability. The CVSS score is 4.0, indicating medium severity. No known exploits are reported in the wild. No patch or remediation details are currently provided by the vendor.
CVE-2025-58486 is a medium severity vulnerability in Samsung Account prior to version 15.5.01.1 caused by improper input validation. This flaw allows a local attacker to execute arbitrary scripts. The vulnerability has a CVSS 3.1 base score of 4.0, indicating limited impact primarily on confidentiality with no impact on integrity or availability. No known exploits are reported in the wild. There is no explicit patch or remediation information provided, and the affected versions are not specified.
Improper export of android application components in Galaxy Store for Galaxy Watch prior to version 1.0.06.29 allows local attacker to install arbitrary application on Galaxy Store.
